Fix FN matcher-request
parent
e72b8e49ef
commit
1cfd71828c
|
@ -1,16 +1,17 @@
|
||||||
id: CVE-2024-6366
|
id: CVE-2024-6366
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: User Profile Builder < 3.11.8 - Unauthenticated Media Upload
|
name: User Profile Builder < 3.11.8 - File Upload
|
||||||
author: securityforeveryone
|
author: securityforeveryone
|
||||||
severity: high
|
severity: high
|
||||||
description: |
|
description: |
|
||||||
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
|
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
|
||||||
reference:
|
reference:
|
||||||
- https://nvd.nist.gov/vuln/detail/CVE-2024-6366
|
|
||||||
- https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
|
- https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
|
||||||
- https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-6366
|
- https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-6366
|
||||||
|
- https://nvd.nist.gov/vuln/detail/CVE-2024-6366
|
||||||
classification:
|
classification:
|
||||||
|
cve-id: CVE-2024-6366
|
||||||
epss-score: 0.00043
|
epss-score: 0.00043
|
||||||
epss-percentile: 0.09351
|
epss-percentile: 0.09351
|
||||||
metadata:
|
metadata:
|
||||||
|
@ -28,15 +29,13 @@ variables:
|
||||||
http:
|
http:
|
||||||
- raw:
|
- raw:
|
||||||
- |
|
- |
|
||||||
GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1
|
GET / HTTP/1.1
|
||||||
Host: {{Hostname}}
|
Host: {{Hostname}}
|
||||||
|
|
||||||
matchers:
|
matchers:
|
||||||
- type: dsl
|
- type: dsl
|
||||||
dsl:
|
dsl:
|
||||||
- 'contains(body,"User Profile Builder")'
|
- 'contains(body,"/plugins/profile-builder")'
|
||||||
- 'status_code == 200'
|
|
||||||
condition: and
|
|
||||||
internal: true
|
internal: true
|
||||||
|
|
||||||
- raw:
|
- raw:
|
||||||
|
|
Loading…
Reference in New Issue